adalal/gotenberg
1
0
Fork 0
mirror of https://github.com/gotenberg/gotenberg.git synced 2026-08-17 04:32:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

sanitizing filename parameter of toHTML function

Browse Source
This commit is contained in:
Julien Neuhart
2020-06-05 11:52:17 +02:00
parent f86091382f
commit b25456835a
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
internal/pkg/printer/markdown.go
View File

@@ -3,15 +3,14 @@ package printer
import ( import (
"bytes" "bytes"
"fmt" "fmt"
"html/template"
"io/ioutil"
"path/filepath"
"github.com/microcosm-cc/bluemonday" "github.com/microcosm-cc/bluemonday"
"github.com/russross/blackfriday/v2" "github.com/russross/blackfriday/v2"
"github.com/thecodingmachine/gotenberg/internal/pkg/xerror" "github.com/thecodingmachine/gotenberg/internal/pkg/xerror"
"github.com/thecodingmachine/gotenberg/internal/pkg/xlog" "github.com/thecodingmachine/gotenberg/internal/pkg/xlog"
"github.com/thecodingmachine/gotenberg/internal/pkg/xrand" "github.com/thecodingmachine/gotenberg/internal/pkg/xrand"
"html/template"
"io/ioutil"
"path/filepath"
) )
// NewMarkdownPrinter returns a Printer which // NewMarkdownPrinter returns a Printer which
@@ -58,6 +57,7 @@ type templateData struct {
func markdownToHTML(dirPath, filename string) (template.HTML, error) { func markdownToHTML(dirPath, filename string) (template.HTML, error) {
const op string = "printer.markdownToHTML" const op string = "printer.markdownToHTML"
filename = filepath.Base(filename)
fpath := fmt.Sprintf("%s/%s", dirPath, filename) fpath := fmt.Sprintf("%s/%s", dirPath, filename)
b, err := ioutil.ReadFile(fpath) b, err := ioutil.ReadFile(fpath)
if err != nil { if err != nil {